PyPI
blacklanternsecurity/bbot
The recursive internet scanner for hackers. 🧡
AGPL-3.0Sep 17, 2026 · metrics 2.10.0
All tags
Catalogue tag
#recon
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
29 records
PyPI
laramies/theHarvester
E-mails, subdomains and names Harvester - OSINT
GPL-2.0Oct 8, 2026 · metrics 2.10.0
PyPI
blisspixel/recon
Map a domain's public technical footprint with provenance, confidence, and explicit uncertainty. Passive by default, machine-readable, and built to report evidence, not guesses.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
PyPI · npm
freelabz/secator
secator - the pentester's swiss knife
Custom licenseSep 18, 2026 · metrics 2.10.0
Go · npm
xalgorix/xalgorix
Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.
Apache-2.0Sep 9, 2026 · metrics 2.10.0
Hex
zhongwencool/observer_cli
Visualize Erlang/Elixir Nodes On The Command Line
MITSep 9, 2026 · metrics 2.10.0
PyPI
OpenOSINT/OpenOSINT
AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 20 tools. Works with Claude, GPT-4, or local models. For authorized security research only.
MITSep 18, 2026 · metrics 2.10.0
PyPI
adbar/courlan
Clean, filter and sample URLs to optimize data collection – Python & command-line – Deduplication, spam, content and language filters
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Go
Chocapikk/wpprobe
A fast WordPress plugin enumeration tool
MITOct 21, 2026 · metrics 2.10.0
PyPI
arxhr007/Aliens_eye
Hunt down 840+ social media accounts using AI
MITSep 16, 2026 · metrics 2.10.0
Go
chainreactors/gogo
面向红队的, 高性能高度自由可拓展的自动化扫描引擎 | A highly controllable and extensionable automated scanning engine for red teams
GPL-3.0Sep 9, 2026 · metrics 2.10.0
Go
cc1a2b/JShunter
jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vulnerabilities, making it an essential resource for and bug bounty hunters and security researchers.
MITSep 6, 2026 · metrics 2.10.0
PyPI
olizimmermann/s3dns
Find S3 AWS/GCP/Azure buckets while surfing. S3DNS acts as DNS server, follows CNAMEs and matches any bucket pattern
MITSep 10, 2026 · metrics 2.10.0
PyPI · npm
l4rm4nd/PyADRecon
Python3 implementation of ADRecon with support for NTLM and Kerberos authentication querying LDAP. Generates individual CSV files and a single XSLX + HTML report about your AD domain.
MITSep 18, 2026 · metrics 2.10.0
RubyGems
urbanadventurer/WhatWeb
Next generation web scanner
GPL-2.0Aug 28, 2026 · metrics 2.10.0
Go
MikeRoss27/scanforge
One CLI to orchestrate your entire pentest and bug bounty recon workflow.
MITSep 20, 2026 · metrics 2.10.0
Go
djnnvx/yellow
pentest companion on the CLI (project mirror)
MITSep 29, 2026 · metrics 2.10.0
PyPI · npm
l4rm4nd/PyADRecon-ADWS
An implementation of PyADRecon using ADWS instead of LDAP. Generates individual CSV files and a single XSLX + HTML report about your AD domain. Evades EDR detections through ADWS.
MITOct 20, 2026 · metrics 2.10.0
PyPI
Hackerest/pwneye
Your ONVIF and RTSP camera companion for discovering and hacking real-world security cameras 🎥
GPL-3.0Sep 11, 2026 · metrics 2.10.0
Go
11lunaric11/securitychecker
Recon tool for pentesters & bug bounty hunters: check robots.txt, security.txt (RFC 9116) and /.well-known/ across many targets. CLI + web UI, single static Go binary.
MITSep 10, 2026 · metrics 2.10.0
Go
mehulgupta1/subhound
Advanced subdomain enumeration for Linux & macOS — one Go binary that orchestrates subfinder, dnsx, httpx, asnmap & more into a fast discover→resolve→probe pipeline.
No licenseOct 19, 2026 · metrics 2.10.0
Go
rix4uni/gf
A wrapper around grep, to help you grep for things
MITSep 8, 2026 · metrics 2.10.0
—
spidersuite/SpiderSuite
SpiderSuite (web security crawler) releases, wiki and roadmap
No licenseSep 20, 2026 · metrics 2.10.0
Go
syswraith/heimdall
Fast, concurrent username OSINT tool in Go — checks presence across sites via HTTP, JSON, headless browser, and OpenGraph parsing, with SQLite caching and YAML-driven site configs.
AGPL-3.0Sep 13, 2026 · metrics 2.10.0
Go
willygoid/fofa-grabber
A powerful Golang tool to fetch and export FOFA.info search results via API with real-time saving, concurrent requests, and multiple output formats (CSV, JSON, TXT)
MITSep 10, 2026 · metrics 2.10.0
npm
devxprite/infoooze
A OSINT tool which helps you to quickly find information effectively. All you need is to input and it will take take care of rest.
MITSep 16, 2026 · metrics 2.10.0
Go
hackthacker-sec/recontool
Unified reconnaissance CLI for subdomain discovery, HTTP probing, asset discovery, OSINT, and Wayback data combining subfinder, httpx, chaos, uncover, and Wayback CDX in one tool
MITSep 9, 2026 · metrics 2.10.0
crates.io
santhreal/ctlog
Canonical Certificate Transparency (crt.sh) client and name-extraction parser for Santh scanners - single source of truth for CT-log subdomain/origin discovery.
No licenseSep 18, 2026 · metrics 2.10.0
crates.io
Sh1Yo/x8
Hidden parameters discovery suite
GPL-3.0Oct 17, 2026 · metrics 2.10.0